As of 13 August 2026, AI can only partly check your email marketing consent process under UK PECR.

What to actually do

1. Hand it to a person

   The route this page recommends

   Someone with a licence or accountable authority has to sign this before it counts.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 2 hours until you can act on the result.

   How to actually do it

   1. Open the current ICO guidance on electronic mail marketing and the relevant PECR provisions, then save the source links you will use for checking.
   2. Gather the full sign-up wording, screenshots or a written description of each consent journey, the list source, consent logs, privacy information, suppression-list process and unsubscribe workflow.
   3. Separate the evidence by recipient type, including individuals, sole traders, limited companies, existing customers and contacts obtained from another organisation.
   4. Paste the evidence and the self-contained prompt into a chatbot, replacing each bracketed slot and asking it to identify missing facts rather than fill them in.
   5. Copy each finding into a review table with columns for evidence, PECR or UK GDPR issue, ICO or legislation source, internal check and professional confirmation needed.
   6. Compare every cited proposition with the saved ICO or legislation source, checking that the source is current on 2026-08-13 and that the facts in your records support the model's conclusion.
   7. Send the table, underlying evidence and unresolved issues to a solicitor or data protection specialist before changing the process or relying on an exception.

   Prompt

   Check the email marketing consent process below against UK PECR and the related UK GDPR requirements. This is a compliance gap analysis, not professional advice.
   
   Use only current, attributable sources, prioritising the ICO and legislation.gov.uk, and provide a link and access date for every legal proposition. If you cannot verify a point from a current source, label it "needs professional confirmation" rather than guessing.
   
   Separate the findings into:
   1. direct marketing rules that appear to apply;
   2. whether the consent wording is specific, informed, freely given and capable of being withdrawn;
   3. whether the collection method creates evidence of consent;
   4. whether any soft opt-in or other exception is being relied on, and what facts must be true for it to apply;
   5. unsubscribe and suppression-list handling;
   6. use of bought, shared or transferred lists;
   7. gaps, contradictions and missing evidence;
   8. practical actions, ranked by legal risk and urgency.
   
   For each finding, quote the relevant process text or identify the missing evidence, explain the issue in plain English, cite the source, and state whether the point can be checked internally or needs a solicitor or data protection specialist. Do not declare the process compliant, invent facts, infer consent from silence or pre-ticked boxes, or give a definitive legal conclusion.
   
   Business context: [business type and location]
   Recipients: [individuals, sole traders, companies, or mixed]
   Messages: [what the emails promote]
   List source: [how each address was collected or obtained]
   Consent wording and sign-up journey: [paste in full]
   Records retained: [what is recorded, where, and for how long]
   Unsubscribe process: [describe it]
   Soft opt-in or other exception relied on: [describe it]
   
   Process and documents to review:
   [paste the full process, wording, screenshots as text, supplier terms and relevant records]

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.